Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
File: kyZYOBNEfHvd61oBwydNjkHDAaI.mft (raw, json)
Hash identifier: HA9p2N6nj4HbnoPtt5TaVpKsYL+FlptHlo/QoUVMois=
Subject key identifier: F6:03:E7:CB:6E:8F:B1:D3:31:02:1B:A7:DB:DD:FC:A1:4A:5F:48:1E
Authority key identifier: 93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
Certificate issuer: /CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Certificate serial: 0194BC3C2BA35BBC5718B89BF95BB84D4D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
Manifest number: 0EF1
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: kyZYOBNEfHvd61oBwydNjkHDAaI.crl (hash: FCAMnWj/g4sPXOrVF6zjgNX6wE2IUpK6uzWbTFQXOSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2b:a3:5b:bc:57:18:b8:9b:f9:5b:b8:4d:4d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=f603e7cb6e8fb1d331021ba7dbddfca14a5f481e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:c7:92:d9:b0:ea:3e:23:ab:44:c0:50:3e:
4e:69:e1:35:a8:a3:72:d0:c2:22:3f:5a:b7:e9:fe:
eb:2c:e9:f1:d2:39:3a:56:7d:57:7f:e5:19:8e:68:
88:4a:08:86:8d:c5:55:ac:76:5e:c2:94:ec:b1:23:
f0:24:35:58:34:35:da:eb:19:2c:f4:5c:b9:79:2c:
a5:dd:7a:12:35:6a:b6:a3:ec:ab:ee:05:f0:54:7e:
81:c6:58:af:90:ba:31:b5:6f:ea:8d:b6:f9:03:61:
c5:93:2a:a5:e8:80:e8:12:ed:d3:6f:2e:ca:b7:72:
25:7a:0e:2c:47:76:2b:13:cb:7b:cd:7b:ce:6a:fa:
26:1a:1d:ab:d3:33:8f:d5:c2:43:cf:65:63:d7:bd:
96:79:15:77:b6:ea:70:22:68:47:d1:48:95:e6:35:
58:16:8a:65:ff:5a:e8:5f:56:c1:6a:8e:e1:77:28:
95:e9:32:bf:d4:31:7a:18:64:50:1f:9f:21:1e:9d:
42:98:00:cd:b9:67:37:9c:de:63:d7:0f:37:33:91:
dc:e1:17:53:54:a1:11:62:0a:c5:32:77:a9:39:d3:
ca:34:10:80:e6:d6:ee:90:a0:82:ca:66:8d:66:30:
ac:80:09:39:bf:14:1d:bd:1c:de:9b:33:95:fb:4a:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:03:E7:CB:6E:8F:B1:D3:31:02:1B:A7:DB:DD:FC:A1:4A:5F:48:1E
X509v3 Authority Key Identifier:
keyid:93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:60:b0:96:43:4d:12:e1:df:b5:ad:5e:13:88:c9:c3:29:df:
44:6c:52:77:25:6f:cb:ae:65:be:b1:bd:ad:02:99:3f:24:a9:
3a:a7:7e:97:f8:7f:15:f4:29:cb:b5:11:3a:45:33:87:ed:da:
94:ce:55:d0:19:a7:e6:49:15:4a:b4:93:58:81:6b:e9:6f:d7:
24:36:da:83:97:16:fa:c4:5c:e2:9c:9c:32:fc:51:82:f4:6b:
c0:8b:58:f8:2d:02:24:9b:04:a9:ce:09:b1:e3:07:6a:b2:f1:
d1:56:04:29:62:1f:ee:9d:58:85:cd:2e:95:97:ec:57:ef:e9:
c5:8b:5f:eb:83:80:12:17:79:d1:a6:85:a4:4f:e5:17:32:e5:
ef:90:90:e0:76:79:28:83:9a:00:0e:61:73:24:7a:98:48:d3:
2b:80:64:65:57:1c:bd:c0:13:8a:48:93:fc:05:ac:2e:5f:74:
0c:e0:d6:6a:29:98:95:d2:5c:9a:95:8b:0b:88:07:a2:dc:db:
35:75:0d:4c:d4:31:b2:08:fb:90:fe:19:87:52:18:3f:59:ca:
4a:14:ce:32:c8:b3:ef:d0:df:a9:97:5b:74:7e:31:07:a4:17:
b2:32:5e:7d:25:22:d0:6b:8c:65:53:85:e5:51:07:bc:6e:46:
f0:a9:4a:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCujW7xXGLib+Vu4TU1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjY1ODM4MTM0NDdjN2JkZGViNWEwMWMzMjc0ZDhlNDFj
MzAxYTIwHhcNMjUwMTMxMTIwMDQ3WhcNMjUwMjAxMTIwMDQ3WjAzMTEwLwYDVQQD
EyhmNjAzZTdjYjZlOGZiMWQzMzEwMjFiYTdkYmRkZmNhMTRhNWY0ODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjDHktmw6j4jq0TAUD5OaeE1qKNy
0MIiP1q36f7rLOnx0jk6Vn1Xf+UZjmiISgiGjcVVrHZewpTssSPwJDVYNDXa6xks
9Fy5eSyl3XoSNWq2o+yr7gXwVH6BxlivkLoxtW/qjbb5A2HFkyql6IDoEu3Tby7K
t3Ileg4sR3YrE8t7zXvOavomGh2r0zOP1cJDz2Vj172WeRV3tupwImhH0UiV5jVY
Fopl/1roX1bBao7hdyiV6TK/1DF6GGRQH58hHp1CmADNuWc3nN5j1w83M5Hc4RdT
VKERYgrFMnepOdPKNBCA5tbukKCCymaNZjCsgAk5vxQdvRzemzOV+0p1KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYD58tuj7HTMQIbp9vd/KFKX0geMB8GA1UdIwQY
MBaAFJMmWDgTRHx73etaAcMnTY5BwwGiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3laWU9CTkVmSHZkNjFvQnd5ZE5qa0hEQWFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZGVjMDYtOGIxYi00Yzc2LWE1NGMt
NjliNGI0ZmI5ZDEyLzEva3laWU9CTkVmSHZkNjFvQnd5ZE5qa0hEQWFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZGVjMDYtOGIxYi00Yzc2LWE1NGMtNjliNGI0ZmI5ZDEy
LzEva3laWU9CTkVmSHZkNjFvQnd5ZE5qa0hEQWFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWCwlkNN
EuHfta1eE4jJwynfRGxSdyVvy65lvrG9rQKZPySpOqd+l/h/FfQpy7UROkUzh+3a
lM5V0Bmn5kkVSrSTWIFr6W/XJDbag5cW+sRc4pycMvxRgvRrwItY+C0CJJsEqc4J
seMHarLx0VYEKWIf7p1Yhc0ulZfsV+/pxYtf64OAEhd50aaFpE/lFzLl75CQ4HZ5
KIOaAA5hcyR6mEjTK4BkZVccvcATikiT/AWsLl90DODWaimYldJcmpWLC4gHotzb
NXUNTNQxsgj7kP4Zh1IYP1nKShTOMsiz79DfqZdbdH4xB6QXsjJefSUi0GuMZVOF
5VEHvG5G8KlK3A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:43 2025 by rpki-client